VS Order of Precedence When Using iRules

Hi Craig,

Order of precedence is processed in a way that processes a more specific match first. So if your virtual server with a datagroup has a /32 destination, it is more specific than a wildcard vs using 0.0.0.0 as the destination. So to answer question one, assuming you have a more specific destination for the first VS, VS: 10.10.10.10:443 will take precedence over 0.0.0.0:443.

If you reject a connection in the VS that takes precedence, it will not automatically try the next VS. It will issue an RST to the client and when it tries again, will be processed by the same VS (assuming it is using the same connection - source and dest IP/port)

if you want to send a connection to another VS you can use the

virtual

when CLIENT_ACCEPTED { 
    if {!([class match [IP::client_addr] equals SRC_IP_DG])} { 
        virtual OTHER_VS_NAME 
    } 
 }